345d7a06f95d960f53e35db959c8b574_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

345d7a06f95d960f53e35db959c8b574_JaffaCakes118
Size

8KB
MD5

345d7a06f95d960f53e35db959c8b574
SHA1

aa779b743adebef4b4afd92e815a073f4a3a603b
SHA256

6da271db5399353bc8cd1eaae24522a0930af3cd3249247fbaf87907e7a8cc5b
SHA512

c3d6de8c71dd880f9f574192d6f2a519b7aed28141446510a03cc7d75d0d7bfd90aaca58782d91e0d3d6127d6fc99662b5276753360b19eed0316a6682d47cac
SSDEEP

96:yHLHv0ek0C1K0IYwsdbwwFQ+Pc+wCxlDorHcVaUT0V+ef6fbdG3MdF:yLHvglIY5kgXEr2ef6fbdG3S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
345d7a06f95d960f53e35db959c8b574_JaffaCakes118

Files

345d7a06f95d960f53e35db959c8b574_JaffaCakes118
.exe windows:4 windows x86 arch:x86

938504d0ff54ef9238e91b8fee36fb35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegCreateKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetFileAttributesA
SetUnhandledExceptionFilter

msvcrt

_spawnl
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_isctype
_mkdir
_onexit
_pctype
_setmode
abort
atexit
ctime
fclose
fflush
fopen
fprintf
fputs
fread
free
fwrite
malloc
signal
strcmp
strcpy
strlen
time

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 224B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE